HAWQ-1294. Removed ALL privilege from HAWQ Ranger definition (closes #1101)
Project: http://git-wip-us.apache.org/repos/asf/incubator-hawq/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-hawq/commit/d3983eb5 Tree: http://git-wip-us.apache.org/repos/asf/incubator-hawq/tree/d3983eb5 Diff: http://git-wip-us.apache.org/repos/asf/incubator-hawq/diff/d3983eb5 Branch: refs/heads/2.1.0.0-incubating Commit: d3983eb56312b076f2e5fff000cda17f027da291 Parents: 8a5e65b Author: Alexander Denissov <[email protected]> Authored: Wed Jan 25 11:12:48 2017 -0800 Committer: Alexander Denissov <[email protected]> Committed: Thu Jan 26 11:59:13 2017 -0800 ---------------------------------------------------------------------- ranger-plugin/conf/ranger-servicedef-hawq.json | 19 ------------------- .../authorization/model/HawqPrivilege.java | 3 +-- 2 files changed, 1 insertion(+), 21 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-hawq/blob/d3983eb5/ranger-plugin/conf/ranger-servicedef-hawq.json ---------------------------------------------------------------------- diff --git a/ranger-plugin/conf/ranger-servicedef-hawq.json b/ranger-plugin/conf/ranger-servicedef-hawq.json index 03005bc..5e22ad1 100644 --- a/ranger-plugin/conf/ranger-servicedef-hawq.json +++ b/ranger-plugin/conf/ranger-servicedef-hawq.json @@ -212,25 +212,6 @@ "itemId": 12, "name": "usage-schema", "label": "usage-schema" - }, - { - "itemId": 13, - "name": "all", - "label": "All", - "impliedGrants": [ - "select", - "insert", - "update", - "delete", - "references", - "usage", - "create", - "connect", - "execute", - "temp", - "create-schema", - "usage-schema" - ] } ], http://git-wip-us.apache.org/repos/asf/incubator-hawq/blob/d3983eb5/ranger-plugin/service/src/main/java/org/apache/hawq/ranger/authorization/model/HawqPrivilege.java ---------------------------------------------------------------------- diff --git a/ranger-plugin/service/src/main/java/org/apache/hawq/ranger/authorization/model/HawqPrivilege.java b/ranger-plugin/service/src/main/java/org/apache/hawq/ranger/authorization/model/HawqPrivilege.java index ffce67a..2e44582 100644 --- a/ranger-plugin/service/src/main/java/org/apache/hawq/ranger/authorization/model/HawqPrivilege.java +++ b/ranger-plugin/service/src/main/java/org/apache/hawq/ranger/authorization/model/HawqPrivilege.java @@ -37,8 +37,7 @@ public enum HawqPrivilege { execute, temp, create_schema, - usage_schema, - all; + usage_schema; /** * Returns HawqPrivilege type by case-insensitive lookup of the value.
